CVE-2020-15358

mediumCVSS 5.5covered by 1 sourcefirst seen 2026-08-06

CSIRTS triage

What: The query-flattener optimization in select.c mishandles constant propagation through transitive properties, causing a heap overflow.
Who is affected: SQLite versions before 3.32.3 processing certain complex queries with constant propagation are affected.
Urgency: Medium; heap overflow with CVSS 5.5 requiring a crafted query; not actively exploited.
Action: Upgrade to SQLite 3.32.3 or later.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2020-15358

Get an email if CVE-2020-15358 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Moderate exploitation risk1.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 61% of all EPSS-scored CVEs.

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2020-15358 status](https://www.csirts.com/badge/CVE-2020-15358)](https://www.csirts.com/cve/CVE-2020-15358)